$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: A+EFabsHj0beeBtEas2tjw42NhEUgiA3N5PbvKSPslI= Subject key identifier: 53:9A:3A:73:12:CF:28:58:03:81:6D:8C:0B:1F:40:FD:75:8D:87:7B Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 03E7 Signing time: Sun 11 May 2025 00:09:26 +0000 Manifest this update: Sun 11 May 2025 00:09:25 +0000 Manifest next update: Sun 18 May 2025 00:09:25 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: HNA2eGUgn1kbIsWwkSnMnV5aiXIgV1YGEdjURBI9NDY=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: May 11 00:09:25 2025 GMT Not After : May 18 00:09:25 2025 GMT Subject: CN=681feab6-6755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:7c:dd:af:20:b5:81:71:7b:32:c6:0c:8d: 9b:64:d6:cc:54:b6:bf:8d:31:46:a9:62:7f:9c:b5: 95:af:f4:e4:26:bf:7e:69:12:01:75:d0:3f:91:ad: d0:dd:d6:bb:58:b4:ab:e4:45:0c:8a:67:2f:30:b6: 82:0c:c1:bd:df:75:cf:79:c5:f9:f6:03:be:b5:04: 20:a3:24:2c:69:be:0f:e7:81:6f:e8:0c:07:ea:48: 86:84:98:43:be:1b:72:2a:65:60:5b:1f:79:88:27: e7:d5:ab:c3:ed:7b:f8:c8:69:0d:1c:84:69:5b:57: 52:eb:92:be:b3:a0:7a:35:c2:66:3b:c9:88:dc:7f: 28:97:a5:80:49:6b:3e:da:f7:be:e2:33:97:b7:f1: e7:90:bb:c5:6c:da:80:d6:25:e6:cf:e7:54:2e:9b: e0:ed:04:ac:fb:d6:13:46:91:c7:11:30:f0:96:73: 74:92:e9:3d:8c:65:a5:10:ca:81:34:f5:79:ea:44: 4b:b3:96:da:c9:5a:1e:c7:6b:04:7b:19:39:dc:07: 35:ea:ae:70:4a:7f:6b:d8:4e:60:25:2d:77:8c:35: a8:51:db:af:01:13:0c:12:66:3b:7b:3d:b1:c5:e2: d5:5e:42:59:74:19:40:63:4b:0e:07:a8:29:86:e5: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:3A:73:12:CF:28:58:03:81:6D:8C:0B:1F:40:FD:75:8D:87:7B X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d5:34:2e:fa:29:45:63:0d:ca:a1:68:05:9e:d3:fe:da:34: 7c:d3:e0:45:9f:a6:08:c6:9a:8b:8f:46:60:e1:2e:15:4f:46: 4b:83:17:fb:08:32:53:4b:45:1f:59:cc:f7:a5:46:ea:5e:ff: 20:ee:9f:72:29:48:6a:ea:f6:79:a9:58:43:d4:56:c4:47:3e: 62:99:dd:1a:f5:f3:ee:cd:b6:23:fe:8f:92:32:ea:0d:a4:64: 0d:4f:84:ce:b2:a9:13:93:e0:73:b7:2f:d6:38:70:75:ec:26: b4:01:a7:85:93:00:b6:72:cd:91:3e:2f:11:fc:e4:f3:8b:31: 68:ec:5a:e5:00:dd:d9:df:c4:92:53:b4:9f:c1:c5:6f:7a:fa: 4e:90:3c:d4:45:c6:dd:07:2e:ed:1a:f2:99:49:c2:e9:36:ef: 5a:27:9e:a7:14:cd:4c:19:eb:84:5a:9f:ac:3e:08:ac:32:f8: de:56:4b:b9:da:39:be:dd:44:60:9f:7c:c5:79:7e:b3:3e:4a: 61:07:ad:1b:61:17:6d:33:b8:ac:9a:a9:c1:dc:82:88:bd:f5: c2:e4:e1:49:67:e7:c6:5f:8a:bb:2c:c9:c5:4b:e8:18:d6:f1: a0:4f:f5:06:ce:00:99:87:85:c1:ff:32:2a:1c:1d:44:27:78: 7c:29:56:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNTExMDAwOTI1WhcNMjUwNTE4MDAwOTI1WjAYMRYwFAYD VQQDEw02ODFmZWFiNi02NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQF83a8gtYFxezLGDI2bZNbMVLa/jTFGqWJ/nLWVr/TkJr9+aRIBddA/ka3Q 3da7WLSr5EUMimcvMLaCDMG933XPecX59gO+tQQgoyQsab4P54Fv6AwH6kiGhJhD vhtyKmVgWx95iCfn1avD7Xv4yGkNHIRpW1dS65K+s6B6NcJmO8mI3H8ol6WASWs+ 2ve+4jOXt/HnkLvFbNqA1iXmz+dULpvg7QSs+9YTRpHHETDwlnN0kuk9jGWlEMqB NPV56kRLs5bayVoex2sEexk53Ac16q5wSn9r2E5gJS13jDWoUduvARMMEmY7ez2x xeLVXkJZdBlAY0sOB6gphuUQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOaOnMS zyhYA4FtjAsfQP11jYd7MB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV1TQu+ilFYw3KoWgFntP+2jR80+BFn6YIxpqLj0Zg4S4VT0ZLgxf7 CDJTS0UfWcz3pUbqXv8g7p9yKUhq6vZ5qVhD1FbERz5imd0a9fPuzbYj/o+SMuoN pGQNT4TOsqkTk+Bzty/WOHB17Ca0AaeFkwC2cs2RPi8R/OTzizFo7FrlAN3Z38SS U7SfwcVvevpOkDzURcbdBy7tGvKZScLpNu9aJ56nFM1MGeuEWp+sPgisMvjeVku5 2jm+3URgn3zFeX6zPkphB60bYRdtM7ismqnB3IKIvfXC5OFJZ+fGX4q7LMnFS+gY 1vGgT/UGzgCZh4XB/zIqHB1EJ3h8KVZZ -----END CERTIFICATE-----Generated at Sun May 11 01:55:19 2025 by rpki-client